SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-47406

HIGH · CVSS 8.1 EPSS 0.23% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-07-21 · Last synced 2026-08-20

CyberRota Analysis

AI-Generated

The PraisonAI Platform versions prior to 0.1.4 are vulnerable to an Insecure Direct Object Reference, allowing unauthorized users to manipulate dependencies between issues across different workspaces. This vulnerability enables attackers to create arbitrary links between issues, potentially leading to data integrity issues and unauthorized access to sensitive information. Organizations using affected versions should prioritize patching to version 0.1.4 to mitigate the risk of exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-47406
Severity
HIGH
CVSS
8.1
EPSS
0.23%

Original NVD Description

PraisonAI Platform is the platform layer for the PraisonAI multi-agent teams system. Versions prior to 0.1.4 have an Insecure Direct Object Reference. The dependency endpoints (`POST/GET /workspaces/{workspace_id}/issues/{issue_id}/dependencies` and `DELETE .../dependencies/{dep_id}`) gate access on `require_workspace_member(workspace_id)` only, then dispatch to `DependencyService` calls that take URL/body-supplied issue and dependency IDs without verifying any of them belong to the membership-checked workspace. Most damaging: `create_dependency` accepts `body.depends_on_issue_id` from the request body — that ID is checked against nothing — letting an attacker create a "blocks" or "related" link between any two issues anywhere in the database. PraisonAI Platform version 0.1.4 patches the issue.